From: Joe Britt 

To: Beaver. Ebony K. - Procurement Services 

Subject: RE: Response to RFP No. B180003244: - Richmond Police Department Records Management System 

Date: Monday, November 26,2018 5:50:52 PM 


Thank you for the contact on this issue. The RFP response submitted by Computer Square inc. (dba 
CSI Technology Group) did NOT contain any proprietary information. Therefore there was no 
additional, redacted version of the response to be submitted. 

Joe Britt, Sr. Vice President 
CSI Technology Group 

ibritt@csitech.com; (732) 346-0200 


From: Beaver, Ebony K. - Procurement Services <Ebony.Beaver@richmondgov.com> 

Sent: Monday, November 26, 2018 11:42 AM 

To: Beaver, Ebony K. - Procurement Services <Ebony.Beaver@richmondgov.com> 

Subject: Response to RFP No. B180003244: - Richmond Police Department Records Management 
System 

Good Morning 

We have received a Freedom of Information Act (FOIA) request in regards to this Request for 
Proposal (RFP). 

Page 26 of the above-noted RFP outlines the requirements for proposals containing proprietary 
information and what is subject to FOIA: 

2.7.3 Proprietary Information. Pursuant to City Code § 21-5(f) (Va. Code § 2.2- 
4342(F)), trade secrets or proprietary information submitted by an Offeror in 
connection with this procurement transaction shall not be subject to the Virginia 
Freedom of Information Act, provided that the Offeror (i) invokes the protections of 
section 21-5 of the Code of the City of Richmond prior to or upon submission of the 
data or other materials, (ii) identifies the data or other materials to be protected, and 
(iii) states the reasons why protection is necessary. Classifying aspects of the proposal 
that are not trade secrets or proprietary is cause for the City to reject the proposal. 
Budgets and price quotations are considered public information in proposals submitted 
to the City. Classifying budgets and price quotations as “proprietary” or “confidential” 
is cause for the City to reject the proposal. 

The RFP requires submission of an electronic redacted copy of your proposal response: 

(page 14) 3.0 Proposal Contents. 

The proposal must include all of the information set forth in this section and be 
organized as set forth in this section. In addition to the original, the Offeror shall 
submit (i) six (6) complete, bound paper copies of its proposal and (ii) one (1) 
electronic copy in a portable document format readable by the Adobe Reader program 
and in a Microsoft Word format that can be searched and edited. If the Offeror’s 
proposal contains proprietary or confidential information, or trade secrets, the Offeror 
must submit one (1) additional redacted electronic copy. 
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SIGNATURE SHEET 


This signature sheet must be included as part of the Offeror’s proposal, or the City will not consider 
the proposal. The Offeror’s signature below certifies that this proposal as submitted complies with, 
and the Offeror agrees to be legally bound by, all terms and conditions set forth in Request for 
Proposals No. B180003244 for RPD Records Management System. The undersigned hereby 
represents and warrants that the undersigned is duly authorized to sign and submit this proposal on 
behalf of the Offeror. 


Complete Legal Name of Offeror Firm: 
“Order from” Address: 

“Remit to” Address: 

Federal EIN / SSN: 

Authorized Signature: 

Printed Name of Signatory: 

Title of Signatory: 

Telephone Number with Area Code: 
Fax Number with Area Code: 

E-Mail Address: 

Date: 
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Addendum Acknowledgment 

No addendum to the original RFP was received. 
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CSI is a registered business in the State of New Jersey. The following certificate documents that we have 
been approved under the Small business Set-Aside Act and Minority and Women Certification Program. 
We generally do not use subcontractors. 



of Jfofa f&rB»g 

PHILIP D. Ml RPHY DEPARTMENT OF THE TREASI RY 

Governor DIVISION OF REVENUE & ENTERPRISE SERVICES 

P.O. BOX 026 

SHEILA Y. OLIVER TRENTON, NJ 08625-034 ELIZABETH MAHER Ml'OlO 

Lt. Governor PHONE. 609-292-2146 FAX. 609-984-6679 Acting Slate Treasurer 

APPROVED 

under the 

Small Business Set-Aside Act and Minority and Women Certification Program 

This certificate acknowledges COMPUTER SQUARE INC as a Category 3 and 5 
approved Small Business Enterprise that has met the criteria established by N.J.A.C. 

17:13 and/or 17:14. 


This registration will remain in effect for three years. Annually the business must submit, 
not more than 60 days prior to the anniversary of the registration notice, an annual 
verification statement in which it shall attest that there is no change in the ownership, 
revenue eligibility or control of that business. 


If the business fails to submit the annual verification statement by the anniversary date, 
the SBE registration will lapse and the business SBE status will be revoked in the New 
Jersey Selective Assistance Vendor information (NJSAVI) database that lists registered 
small businesses.If the business seeks to be registered again, it will have to reapply and 
complete the New SBE online registration located at: 
www.njportal.com/DOR/SBERegistry/. 



Issued: 2/20/2018 Expiration: 2/20/2021 

Certification Number: A0066-09 
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Statement of Scope 


CSI Technology Group understands that the City of Richmond Police Department 
is looking for a state-of the-art police Records Management System (RMS) to replace 
their current RMS. The replacement system will be cloud-based, that is, utilizing 
Software as a Service (SaaS) technology. Employing this type of solution, the City will 
not need to purchase or be responsible for any servers or network hardware to 
support or maintain the system. This should realize a substantial cost savings to the 
City, both in the form of financial outlay for purchase and maintenance and in human 
resources to maintain the application. CSI handles all coordination with the cloud- 
provider, as well as technical support for the application. 

If selected, CSI will supply the City of Richmond's Department of Police with a 
cloud-based RMS product that will provide robust reporting and data-sharing 
capabilities to support the RMS requirements of a multi-jurisdictional police 
department. 

The application will promote secure data-sharing among authorized users of 
partner agencies, which include but are not limited to, the Virginia Commonwealth 
University Campus Police Department and the Richmond Sheriffs Department. These 
entities may have their own separate RMS modules, if required. The RMS will provide 
seamless integration among all InfoShare™ modules, with appropriate, secure access 
and permissions to data, as determined by the needs of the City. 

In addition to the RMS, CSI will provide the following modules for the solution. 
All modules are fully and seamlessly integrated with the RMS and each other: 

o Police RMS MDT 
o Warrants 

o Personnel, Scheduling, Policy & Procedure 
o Evidence 
o Intelligence Module 
o Permits & Licenses 
o Fleet Management 
o Internal Affairs 
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o Pawn Shop Module 
o Large File Repository for Video files 

o Full citation management for parking tickets and moving violations 
o Jail Management 
o Impound Yard Management 

CSI will also build appropriate interfaces to exchange data between the RMS and 
the applications listed in Exhibit III of the RFP. 

If selected, CSI will convert the current data and migrate it to the new system. 
We will provide training, installation and post-installation support. Our excellent 
customer service will be available throughout the life of the contract. 

CSI specializes in premium software for law enforcement and public safety 
agencies. Our RMS has been installed in both local and regional police departments, 
on both site-hosted and cloud-hosted platforms. Even in our regional and multi¬ 
jurisdiction deployments, each agency maintains its own identity in the system with its 
own logos, departmental identification, report headers, etc. Reports and interfaces 
will be configured to meet the needs and requirements of the City, while preserving 
the identity of each organization, where appropriate. 

As you can see in the details of this response, we are quite familiar with and 
deeply understand the reporting needs of police departments. Many on CSI's staff are 
former law enforcement officers themselves. If selected, we will provide a superior 
solution for the citizens and the police of the City of Richmond. 
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Executive Summary 


Computer Square, Inc., d/b/a CSI Technology Group, is a New Jersey-based 
company that has been developing cost-effective, browser-based applications 
since 1996. Our focus is on customizable, user-friendly, commercial off-the shelf 
software products and support services for law enforcement, judicial, and 
regulatory agencies. For over 20 years, our systems have evolved significantly, 
based on our focused effort to provide our clients with superior information 
technology. CSI's standards-based approach has allowed us to efficiently 
integrate with a myriad of systems and networks, and has enabled our customers 
to acquire the best solution that meets their needs. 


CSI applications are robustly designed, yet flexible enough to facilitate 
upgrades to meet the needs of an ever-changing environment, be it technology 
upgrades, regulatory changes or other business requirement modifications. 
Specifics such as contact information, codes, statutes, case types, protocols, 
document templates, etc., will be loaded into the system at time of start-up and 
will be easily maintained by Richmond Police Department's authorized systems 
administration staff to accommodate later updates or changes. We are prepared 
to meet all of the requirements listed in the RFP, and we have NIEM and JG-XML 
compliant design, mobile capability and additional features if your requirements 
expand in the future 

CSI Technology Group is uniquely qualified to provide these visionary 
services to the citizens of Richmond. The reason is because we offer advantages 
that no other companies can offer, including; 


• CSI has provided the successful implementation of products across a 
diverse governmental client list including law enforcement, prosecutorial 
agencies, corrections agencies, judicial agencies, regulatory agencies and 


more. 
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• Our RMS has integrated redaction and Bates numbering tools for municipal 
court discovery. This, too, will result in cost savings for the city, as fewer 
staff will be required to prepare officers' discovery for court. 

• The InfoShare™ RMS provides electronic report preparation and approval 
processes. This means more officers can remain on the street for longer 
periods of time because they can prepare reports in their cars and 
supervisors can review and approve reports from inside their cars. 

• Case documentation -When officers prepare reports, they are preparing 
actual PDF documents complete with digital signatures. Many other 
vendors use a template to populate reports "on demand," but the 
InfoShare™ product line produces and saves documents. The entire case 
package is paperless. 

• Multi-jurisdiction capabilities with an "individual department" feel - When 
the application is deployed on a multi-jurisdictional platform, the 
InfoShare™ system is designed so that when a user logs into the 
application, they see their logos and the reports are "their department's" 
reports. It is important that data be shared but it is equally important that 
an agency does not lose its identity in the process. 

• Customer service - Our customer service is unmatched anywhere. We 
welcome you to call our clients and ask them about the services we 
provide. Our company is NEVER satisfied with the status quo; we are 
constantly striving to capitalize on new technology and improve the 
functionality of our applications. Criminal Justice never stops evolving and 
neither can we. 

• Agency control - We give the agency control over user groups, support 
files, form template generators, permissions and other settings so that the 
agency is empowered. You can make many of these changes yourself, 
without any intervention from our company. While we pride ourselves on 
unparalleled customer service and support, we also know that the 
convenience of "getting it done immediately" is the right thing to do for our 
clients. 

• Data conversion services - We offer the most comprehensive structured 
data conversion services on the market today. We do not "just make the 
data fit" into the InfoShare™ system. We work with the agency to cleanse 
the data, standardize 
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it and normalize it for future reference. Most vendors do not perform this 
service properly because it is extremely complex and labor intensive. CSI 
Technology Group employs highly trained and experienced engineers who 
specialize in data conversion so that we can do it the right way. 

• Flexibility in hosting capabilities -Our InfoShare™ application is fully cloud- 
ready and we will provide the City of Richmond Department of Police with a 
GIS-compliant, cloud platform to host your new RMS application. 


The content of this proposal accurately reflects CSI's ability to satisfy the technical 
and functional requirements of this RFP. We look forward to an opportunity to 
further discuss our RMS product with you and answer any questions you may 
have about our proposed solution for your agency. Please do not hesitate to 
contact Rich Norcross at 732.346.0200, by fax at 732.346.0209, or by e-mail at 
rnorcross(S)csitech.com . Also, we look forward to the opportunity to demonstrate 
our system to you, so you can see how it will expand the capabilities of your 
agency and enhance public safety in the City of Richmond. 
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public safety organizations. Many of our other law enforcement modules are also 
in use by the New Jersey State Police, as well as local and regional public safety 
agencies. 


CSI has close to two decades of experience in planning installations, 
conducting data conversions from legacy systems, and providing tailored training 
sessions for all major categories of staff. Our training and the implementation 
processes are successful because we focus on how the system integrates with 
individual work activities and what the individual can expect to get out of the 
system. Our tailored approach to workflow, permission and role-based security, 
and robust features make our systems extremely efficient, unique and effective. 


Some of our customers to whom we provide similar services are listed 
below. This is, by far, not a complete customer listing: 


• Morris County (NJ) Department of Law and Public Safety 

• Camden County (NJ) Regional 

• Montgomery County (PA) Department of Public Safety 

• Bergen County (NJ) Sheriffs Office 

• Bergen County (NJ) Public Safety Operational Center 

• New Jersey State Police 

• Oklahoma Department of Corrections 

• All 21 county prosecutors in New Jersey, many with direct communication 
and electronic processing of reports and arrest documents with their local 
police departments through InfoShare™. 

Some of our customers utilize a county cloud platform for their RMS 
system, while others are locally hosted. CSI can accommodate either 
environment, depending on the customer's wishes and requirements. 
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Key Personnel 


While this project will have the full support of CSI, its executive management 
and its skilled engineering staff, the following staff will be the key personnel 
assigned to this project. All staff are assigned to CSI headquarters. Their city 
of residence is noted with their name below and their individual resumes 
follow. 

• Peter Ugalde will be the manager in charge of this project and your first 
line of contact. He resides in Randolph, New Jersey 

• John Mi will be the manager in charge of network design and 
programming. He resides in East Brunswick, NJ 

• Di Di is a network engineer assigned to the project. He resides in 
Piscataway, NJ 

• Peng Cheng is a systems engineer assigned to the project. He resides in 
Hillsboro, NJ. 

• Longhu Dong is a systems engineer assigned to the project. He resides in 
Hillsboro, NJ. 

CSI will make other assignments throughout the lifecycle of the project, as the 
requirements dictate. 
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Peter Ugalde 

Drawing on almost thirty years in law enforcement, Pete coordinates and leads many critical 
public safety projects for CSI. He easily develops a rapport with his clients, as he understands 
their work and what they need to get it done. He is fluent in Spanish and has excellent 
technical skills. 

Professional Profile 

2012- Present; CSI Technology Group 

Vice President and Law Enforcement Liaison 

• Responsible for analyzing, researching, updating, and maintaining CSI application 
modules 

• Coordinates with clients and company programmers on a daily basis on program 
development, customer support and troubleshooting. 

• Trains clients on the use of the CSI applications for criminal case and document 
management, CAD and RMS applications 

• Serves as account manager for many CSI clients, including local and regional police 
departments 
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1983- 2012 Town of Dover Police Department, Dover. NJ 

• 2001 2012 Captain (served as Executive Officer from 2010-2012) 

• 1998-2001 Lieutenant 

• 1994 1998 Sergeant 

• 1993 - 1994 Detective 

• 1985- 1993 Police Officer 

• 1983 1985 Special Police Officer 

A continuously progressing career in law enforcement that was marked by leadership and 
innovation, including the implementation of dispatch operations between his town and the 





county call center, the migration of data between the two systems, investigation of insurance 
fraud, developing and combining information technologies and integrating them into police 
operations and supervision of personnel and operations 

Education 

• 2009, Graduation from FBI National Academy, Quantico, Va. 

• 2009, College of St. Elizabeth, Morristown, NJ, MS, Business Management 

• 2008, College of St. Elizabeth, Morristown, N J, BA, Criminal Justice 

• 1983-2010: Continuous training in law enforcement, investigations, drug enforcement, 
public safety, street gang investigations, networking and technology and community 
policing 
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Peng Cheng 

A specialist in web application develop, Peng is a Microsoft- certified software engineer who 

keeps pace with changing technology to lead many ofCSI's most critical projects 

Professional Profile 

2003- Present: CSI Technology Group 

Project Manager, Software Engineering 

• A specialist in the development of web applications using standard Microsoft product 
suites. 

• Worked on the company’s flagship product, InfoShare™, to develop web- enabled 
applications using SQL server as backend 

• A lead software engineer in the development and support of CAD/RMS, as well as 
systems for New Jersey County Prosecutor’s Offices and Administrative Office of the 
Courts (AOC) 

• Microsoft Certified Professional 

• Sun Certified Java Programmer 
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Education 

• 2005, University of Hertford UK, Distributed Systems and Networks, MS, MS 

• 1998, Southwest Jiaotong University of China, Applied Computer Science, BS 
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LongHu Dong 

A software developer with over ten years of diverse experience in many technologies, LongHu 
leads and contributes to many key projects at CSI. He is a Microsoft Certified Professional. 

Professional Profile 

2008- Present: CSI Technology Group 

Senior Software Developer 

• Works on multiple projects as a senior developer 

• Responsible for system design, technical support, application architecture and database 
structure 

• Designs e-govemment solutions for law enforcement, judiciary, regulatory and 
administrative agencies 

• Develops new web-based system modules using C#, XAML, Silverlight, Java Script and 
MS SQL Server. 

• Developed Link Analysis application for analyzing crime data 

• Developed pawn shop management system for police departments 

5/2007-12/2007 Microsoft Technology Center of Jiangxi 

• In charge of designing the business website using ASP.NET, MSSQL Server, 

XML and JavaScript for Microsoft Technology Center. 

• Studied web application development using Microsoft .NET platforms. 

9/2006- 5/2007 Institute of Computer Applications. Jiangxi University of T.C.M 
International Education College 

• Work-study student 

Education 

• 2008, Jiangxi University of TCM International Education College, Computer Science BS 
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John Mi 

A results-driven network manager, John has led the technical operations of CSI for over 17 
years. He leads a staff of skilled software development and network engineers, inspiring the 
highest level of technical competence to exceed the expectations of CSI customers. 

Professional Profile 

1999- Present: CSI Technology Group 

Director, Department of Engineering 

• Commercial Software Evaluation, Installation and Configuration 

• Network-resident software 

• Commercial Desktop Software Technical Support and Training 

• Commercial Desktop Software Distribution and Version Control 

• Client Installation and Configuration 

• Local and Remote Locations 

• LAN Administration Support 

1997-1999: Infinity Interactive. Inc. 

Responsible for Internet/Intranet TWnet.com, Real Server, Audio/Video on Demand, LAN 

1989-1997, North China Power Group 

Responsible for more than 20 Hardware/Software applications in the electric power field 

Education 

• 2002, University of Bridgeport, CT, Computer Science, MS 

• 1989, Beijing University of Aeronautics and Astronautics, Electrical Automation, BS 
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Di Di 

A highly skilled and trained network engineer, Di is dedicated to maintaining CSI's network 
and keeping the applications running smoothly, securely and efficiently. He is an expert at 
installing, trouble shooting and helping clients with network and system details 

Professional Profile 

2014- Present: CSI Technology Group 
Network Engineer 

• Install, support and maintain Windows server and network hardware 

• Configure and maintain firewall, routing & switching protocols 

• Implement clients' requirements for application redundancy and high availability 

• Deploy & troubleshoot InfoShare™ application. 

• Maintain Windows infrastructure & MS Exchange mail platform 

2010-2011 United Automotive Electronic System Co. 

IT Helpdesk Intern 

• Support network 

• Solve computer, network and printer problems 

Education 

• 2014, University of Hartford (CT), Electrical Engineering, MS 

• 2012, Shanghai Normal University, Communication Engineering, BS 







330 Mac Lane, Keasbey, NJ 08832 
Tel: 732-346-0200 Fax: 732-346-0209 
www, cs i tech, com 



csi TECimmotY bboup 

Premier Software Solutions for eGovernment 


References 


CSI offers the following four clients as references and 
welcomes you to contact them, or any of our other clients, to 
verify our experience, our quality customer service or any 
other information you would like concerning our company 
and our products. All of the following customers represent 
deployments similar in scope and features to what the City of 
Richmond is seeking in this RFP. You may contact them and 
we acknowledge that you may not divulge to us the 
information they provide you. 

• Morris County (NJ) Department of Law and Public Safety 

Scott DiGiralomo, Director 
PO Box 900 
Morristown, NJ 07963 
973-829-8051 

5DiGiralomo@co.morris.ni.us 

In April 2012, CSI Technology Group implemented a Police Records Management System 
(RMS) for the Morris County Department of Law and Public Safety, which provided a 
regional RMS for the local police departments of Morris County. This cloud service 
installation was configured to integrate with their Computer Aided Dispatch (CAD) 
system, which was already in place and provided by another vendor, Keystone. Scope 
also encompassed integration of Mobile Data Terminals (MDT's) in police cars and NCIC 
and DMV look-up capabilities. The implementation also included interfaces with the 
Morris County Prosecutor's modules for Investigation, Prosecution, Sex Offender 
Tracking and Inmate Tracking. 


• Camden County (NJ) Regional RMS 

Chief William P. Walsh, Bellmawr Police Department 

Captain Scott Parker, Bellmawr Police Department 
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In 2016, CSI Technology Group provided the Bergen County Sheriffs Office with their 
own CAD and RMS system, which also includes electronic ticketing. It is hosted on the 
county cloud and communicates with the CAD/RMS CSI provided to the Bergen County 
Public Safety Operational Center. 


Scope for the projects listed above, as in most similar CSI implementations, 
encompassed integration of Mobile Data Terminals (MDT's) in police cars and NCIC and 
DMV look-up capabilities. Implementations have also included interfaces with the 
county Prosecutor's/DA modules for Investigation, Prosecution, Sex Offender Tracking 
and Inmate Tracking. 

Besides cost savings for their citizens, the InfoShare™ Police RMS has provided robust 
features to these law enforcement organizations, including the following: 

• Police Reporting Package with Digital Signatures: 

Standardized Reports customized to the extent that logos and names of agencies are 
unique to each participating agency. This functionality is based upon user login 
credentials. 

• Arrest & Booking Process 

• Field Contact Sub Module 

• Citations & Summons Management 

• Motor Vehicle Accident (CRASH) Reporting 

• Document Imaging (Scanning) 

• Orders of Restraint Module 

• Permit & Licenses Module 

• Fleet Management Module 

• Template Generator that allows each participating agency to create and manage their 
individual document needs apart from the standardized reports 

• Crime mapping utilizing Microsoft BING© Technology 

Implementation plans provide for the installation, configuration and customization of CSI's 
product, InfoShare RMS with access to local police departments in the county. A project plan 
and Scope of Work for each implementation was created by CSI Technology Group, agreed 
upon and shared between the two parties. Our project plans include schedules for gap 
analysis, coding, customization, testing and training, resources and assumptions of 
responsibility and dates for all deliverables and milestones. 
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CSI always assigns a Law Enforcement Liaison with technical knowledge of the InfoShare™ 
Records Management System as a point of contact. The customization process begins with a 
gap analysis between the base CSI application and the requirements of the individual customer. 

CSI delivers on-site training for both administrators and users of the system. This includes 
training for each agency on the creation of documents and use of the template generator. CSI 
also provides an eLearning tutorial that can be accessed by the user{s) from the InfoShare™ 
RMS home screen. 




Project Approach 


System Backup and Redundancy Procedures 

InfoShare™, a hybrid cloud solution, utilizing an Amazon AWS GovCIoud platform which provides VPC (virtual private 
cloud) with the full network security, EC2 VMs and S3 storage services, operates within a target hardened facility, 
with out-of-state disaster recovery. It has been designed by law enforcement professionals for law enforcement 
professionals. 

CSI will work with Richmond Police Department to modify the Department's current Disaster Recovery plan to include 
the data files created by InfoShare™. CSI will provide installation CDs to the agency to restore the application after 
a disaster, and our engineers will assist in any Disaster Recovery efforts to restore business continuity to our 
customers. In addition, CSI maintains a duplicate environment, with sample and test data, on CSI's servers for 
troubleshooting and improvements that is also available for Disaster Recovery purposes. There is no extra charge to 
maintain this duplicate environment. 

InfoShare™ RMS leverages the SQL Server backup and restore component to provide an important safeguard for 
protecting critical data stored in SQL Server databases. A well-planned backup and restore strategy helps protect 
databases against data loss caused by a variety of failures. CSI will develop a tailor-made backup and restore plan with 
the client by considering the essence and importance of their data and their priority of resource distribution. C$J offers 
the following backup plans on demand: 

• Full Database Backups: A full database 
backup backs up the whole database. 

This includes part of the transaction log 
so that the full database backup can be 
recovered. Full database backups 
represent the database at the time the 
backup finished. 

* Partial Backups: A partial backup 
resembles a full database backup, but a 
partial backup does not contain all the 
file groups. Instead, a partial backup 
contains all the data in the primary file 
group, every read/write file group, and 
any optionally-specified read-only files. 

Partial backups are useful whenever you want to exclude read-only file groups. A partial backup of a read¬ 
only database contains only the primary file group. 

♦ Full File Backups: A full file backup backs up all the data in one or more files or file groups. Under the full 
recovery model, a complete set of full file backups, together with enough log backups to span all the file 
backups, is the equivalent of a full database backup. 
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• Using Differential Backups: A differential backup includes only the data that has changed since the 
differential base. Since SQL Server 2008, differential file backups can be very fast because the SQL Server 
Database Engine tracks the changes that were made since the differential base was created. 

♦ Backing Up Read-Only Databases: For a read-only database, the primary file cannot be updated during a 
backup. The best practice for a read-only database is to take a full backup. However, if a database alternates 
between read-only and read/write, it may make sense to back up the database when it is read/write. Then, 
as long as the database remains read/write, if the scope of the changes is small, you can take differentials 
backups. 

In assessing the D/R needs and options for your enterprise (in this case, a multi-tenant RMS, Intelligence, and Case 
Management system that serves hundreds, or thousands, of law enforcement personnel) you will no doubt consider 
a range of options. Across these options, you'll likely place a high priority on both the depth of knowledge in the 
technology and Law Enforcement, and actual experience of vour selected vendor(s). As a solution provider, CSI gives 
you a tremendous level of both. 

Disaster Recovery for a system such as Richmond Police Department is considering, will involve: 

S Hardware S Facilities 

✓ Software ^ Policies, Protocols & Procedures 

S Data Storage S Drills/Exercises 

S Access (Network) 

The actual situations ("disasters") to protect against include fires, floods, major extended power outages, aircraft 
accident, etc. There have even been cases whereby a building's plumbing failures caused the loss of $ Millions in 
computer systems and data. 

There are companies who specialize in large scale D/R. Just one example is a company such as Iron Mountain. Such 
facilities operate in hardened, specifically-engineered datacenter locations - with redundancy built into all of the 
facility, electrical, network, and cooling infrastructure. As your solution provider, CSI works directly with your staff, 
and your selected vendor(s) for the actual physical D/R site. Of course, CSI provides and assists you with all the basic 
components, keeping our own development and test servers backed up and secured as a second-tier means of backup 
unto themselves, and we provide installation CDs or DVD's to the agency (for restoration of the application after a 
disaster), providing you with backup configuration files. But equally as important - possibly more important - is our 
practice whereby our engineers and account/project managers work with you to create, write, and even publish a 
comprehensive D/R plan document. We also work with you on-site during your D/R exercises and simulations. Our 
staff remains available to assist with any aspect of disaster recovery situations with the ultimate and fundamental goal 
to restore business continuity to your customers. 
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Security Features of the InfoShare™ RMS 

Platform Security 


In the event that a secure hybrid cloud solution is provided, CSI offers a hosted Amazon AWS GovGloud platform for 
our RMS solution utilizes state of the art security such as SHA-2, (designed by the National Security Agency for data 
encryption), STS Secure Token Service (security for user information), PCI DSS Auditing (for credit card transactions), 
Federal Information Security Management Act (FISMA), and their Cloud has obtained the ISO/IEC 27001:2005 
certification for Information Security Management.. 

The deployment will utilize the Microsoft Global Foundation Services (GFS) datacenters. The data center is physically 
secured with fire, flood protection, high security locks, closed circuit cameras, biometric devices, electronic ID card 
readers and alarms. All access is secured with positive ID Access Control Lists. 
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InfoShare™ RMS is using a Service-Orientated 
Architecture (SOA) as a foundation for Business 
Process Management (BPM).The Service 
Oriented Architecture (SOA) concept is based on 
the principle of developing reusable business 
service and building applications instead of 
building monolithic applications in silos. BPM is 
a methodology, as well a collection of tools that 
enables enterprises to specify step-by- step 
business processes. Business process 
management (BPM) addresses how 
organizations can identify, model, develop, 
deploy, and manage their business processes, 

Including processes that involve IT systems and 
human interaction. 

The major point of implementing an SOA is to 
provide a loosely coupled integration platform 
that allows application instance to change and 
evolve without affecting the core integration 
technology. Similarly, the process modifications 
that require different applications to 
communicate with each other should not alter 
the core integration technology as well as 
application instance. Figure lO.Technology Architecture of InfoShare™ RMS 

As shown in the diagram, BPM does the modeling, simulation, and redesign of processes. SOA infrastructure 
orchestrates business processes and mediates service providers. Services are exposed, to be used in various processes. 
Service changes should not impact processes. Process changes reuse various services, as needed. 
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According to this technology architecture, InfoShare™ RMS is highly configurable and it's a support file and business 
rule driven system. As a result, it easily accommodates RPD's regulations and policies to fit the city's requirements. 


Network Security 

The InfoShare™ RMS application is a service oriented, N-tier architecture, enterprise web based application. In addition 
to meeting all business requirements, the InfoShare™ RMS architecture will maximize the security and flexibility and 
minimize the management and integration effort. With service oriented design in place, the system can easily 
interoperate with an existing system or 3rd party system. 



Figure 11. INFOSHARE™ RMS N-Tier Architecture Diagram 


With N-tier architecture in place, the system separates different types of business logic into different tiers to provide 
superb flexibility and security. By following this industry best practice, the system takes less effort during managing 
installation and upgrading. The entire architecture is compliant with the most recent software design standards and 
can be easily understood and enhanced by professional software developers. 




A Groups are hierarchat so a child group cannot have more permissions than the parent group. 


Access Security 

Our GIS Security solution has been reviewed and approved by the New Jersey State Police, Identification and 
Information Technology Unit {commonly called the GIS Security Unit). C$1 Technology has two solutions that it 
routinely recommends / uses - 

• Single Use Sign On Code - When a User logs into a PC, they have to put in their User Name & Password 
(Authentication One - Something they know.) and then a Single Use Sign on Code is sent either to their 
registered e-mail address or a registered cell phone. They enter that code to gain access (Authentication 
Two - Something they have). 

• Dongle Key - An encrypted code that is synchronized to a specific User's account is loaded onto an external 
thumb drive. The user enters their User Name & Password (Authentication One - Something they know) 
and the application searches for the matching authentication code on the dongle device (Authentication Two 
- Something they have). 


Due to the confidential and sensitive investigations that our clients routinely do, CSI Technology is extremely sensitive 
to data security and integrity. Every User gets assigned to individual group(s). Each group has certain permissions 
that control every aspect of the application. InfoShare™ has several hundred permissions that allow for very narrow 
access control. For example, there is a clerk at one client location whose only job in the system is to maintain the 
agency staff files. When that user logs in; all they see is one hyperlink that allows that User to handle their 
assignments. They have access to no other data in the application. 
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During the project phase that CSI refers to as the Gap Analysis Phase, we will work with the various entities involved 
in this project to identify their hierarchal structure. We will also train the appropriate administrative staff on how to 
create and maintain these groups in the future. In that process the following will occur- 




i) UEtfH 5 LMTF - >1 


Additionally, every individual case has the ability to be locked down to a specific group of Users within the groups by 
using the Permissions Tab in the case. So for example, if several narcotics detectives are working on a sensitive 
investigation, they can lock that job down to their specific group of detectives. 


• Names of Groups will be identified (often based on the agency table of organization) 

• Group Information will be established. This where - 

o What modules can be accessed 

o What other units' data can be seen by members of the group 
o Who belongs to the group 

• Group permissions will be set. This is where "what people can do" is determined. These permissions range 
from who can simply add something to the database to the far end of the spectrum such as who can merge 
one or more cases together if needed. 


There is a number of Administrative security tools built in as well to include - 

• Transaction Log Reports - All activity is tracked and can be searched on via a number of search criteria. 
■ Transaction Login Reports - Who logged in and from where. 
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NOTE : For officer safety and agency integrity purposes, there should always be a Super User(s) who 
can see all cases at all times. This is a recommendation, not a requirement. 

NOTE : The restriction can always be lifted after a case has gone public if desired. 
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Integration with Active Directory is a very common and standard request that CSI Technology Group receives and there 
should be no issues with this integration. 


Exceptions to Requirements in Section 2.0 

CSI Technology Group understands and will comply with all requirements in Section2.0 
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Technology requirements to Support the RMS: 

• Computer Hardware and Equipment Requirements 

Virtual Server Hardware (Local VMware or Cloud Environment): 

1. InfoRMS Application Server: 

CPU: 4 vCore CPU; 

RAM: 16GB 

Network Interface Card: Virtual Gigabit Ethernet Interface 
Hard Drive Space: 120GB or greater for System, Services and Logs; 

500GB or Up for Application and Logs 

2. InfoRMS Database Server: 

CPU: 8-16 vCore CPU (16 vCore recommended for the extension of the capacity) 
RAM: 32GB 

Network Interface Card: Virtual Gigabit Ethernet Interface 
Hard Drive Space: 120GB or greater for OS, Services and Logs; 

1TB for Data, Transaction Logs and Document Storage 

3. InfoRMS Media Server: (The option for handling a large amount of video media files) 

CPU: 2 vCore CPU 
RAM: 8GB 

Network Interface Card: Virtual Gigabit Ethernet Interface 
Hard Drive Space: 120GB or greater for System, Services and Logs; 

4-8TB or Up for media file storage 


Virtual Server Software: 

Server OS: Microsoft Windows Server 2012 R2/2016 Standard Edition 
Database Server: Microsoft SQL Server 2012 R2/2014/2016 Standard Edition 


• Computer Desktop Requirements 
Client Desktop Computer: 

1. CPU: Intel iS CPU or above processor 

2. RAM: 8Gb of RAM 

3. HDD: 250 GB HDD or SSD 

4. NIC: Gigabit Network Interface Card 

5. Operating System: Windows 7 or Windows 10 (Windows 10 recommended) 

6. Application: Microsoft Internet Explorer 11, Adobe Reader, 

Microsoft Word 2007/2010/2013/2016 (Option) 


% 


• Network requirements 

Local VM Host: 

1. Gigabit Local Ethernet Network 

2. Switch: Gigabit Ethernet Switch 

3. Cable: CATSe or CAT6 Cable (or high speed wireless) 

4. Protocol: TCP/IP, HTTP/HTTPS 
Cloud Host: 

1. The Internet connection is required 

2. The downlink minimum speed: 25Mbps (100Mbps recommended) 

3. Protocol: HTTPS 

• Database Management System 

Microsoft SQL Server 2012 R2/2014/2016 Standard Edition 
(Enterprise Edition if SQL High Availability is required) 

• Other Technical Requirements 

Windows Server license(s) and SQL Server license. 


Data Migration: 

The plan of retrieving data from previous RMS, start date, time to complete, and estimated hours are addressed in the 
project timeline of the implementation plan. During the data migration process, we will need RPD's assistant to prove 
data from the existing system, review and advise on the data analysis report that CSI provides, make decisions when 
there is conflict or ambiguous data found. Data migration and conversion is one of our specialties. Furthermore, an 
exception report will be provided if any discrepancies are found during the data analysis process and we will work with 
RPD to come up alternative solutions, if required. There's no need to compromise on losing any important data. 

CSI has had a great deal of experience in performing data conversion services, including rendering these services after 
the job had been done inadequately by a previous vendor. We do not utilize sub-contractors for this process. We have 
designed a methodology, which we describe below; to perform the conversion and we have highly skilled engineers 
that specialize in legacy data conversions. 

When CSI Technology Group performs a data conversion, it is very important that we stress the fact that we do not 
"just make it fit" into the InfoShare™ system; we cleanse and condense the data. We will work with the agencies to 
cleanse their master indices so that, for example, a unique person exists in InfoShare™ in a single consolidated record 
and not exponentially in disparate records. 

We rise above upon the industry standard with our extensive experience, our high volume of successful deployments 
and highly positive customer feedback. We have the confidence we can make things right the first time. The data 
migration plan is performed conscientiously, step by step, with no ambiguity. 
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• Define data migration objectives 
and scope 

• Identify stakeholders 

• Data migration activities and 
deliverables definition 

• Team roles and committees 
Ittentiftcagfon 

• Develop migration approach 

• Develop data model 

• Datasets assessment and 
prioritization 

• Data quality criteria and evaluator 

• Data cleansing and harmonization 

• Migration pre-requisites and 
sequence 


* Identity data conversion tools 

* Mapping rules 

* Data reconciliation approach 

* Recovery options for each stage 
of the migration and point of no 
return 

* Validation check lists 

■ Execute migration test oydes 

* Solve issues 

■ Full mass load test 



Rot out 


* Ensure data cleansing complete 

* Ensure migration testing 
successful 

■ Execute data loading 
m Audit data tn legacy and target 
systems 

• Migration slgrw>rf 

# Go-Live 


A InfoS ha re™ data migration strategy 


CSI uses SQL Server 2012/2014 Data Transformation Service, which contains a rich set of tools for extracting and 
transforming data. In addition, CSI has devised a methodology to smooth the conversion of criminal justice related 
databases. The data conversion for a legacy system is a multi-step process. Each step requires active user interaction 
as there are many decisions to be made, which ultimately results in cleaner data and better data structure. Therefore, 
CSI works with the client to appoint a data conversion liaison who can call together a data conversion team of Subject 
Matter Experts as needed, where each team member is knowledgeable in a specific area. CSI will have a project 
manager, account manager, and engineer(s) working closely with the data conversion team during the entire data 
conversion process. Each conversion step consists of an analysis step to Extract source data from the legacy system, 
Transform the data according to InfoShare™ requirements, and Load the clean data into the InfoShare™ system. These 
ETL steps are repeated as necessary in each organizational unit, and the successful completion of each step is the 
starting point of the following step. CSI's Data Conversion Engine is based on this principle and we believe our Data 
Conversion process will be a more efficient and effective data migration experience for the agency. 

Following is an example of the process, which will be customized for the data files of the Richmond Police Department. 

Steps 1 and 2 the initial data analysis and generating of table structure and support data: 
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Steps 3 and 4 create the basic framework for case/records management parties involved and the key identifiers. 


At the end of the process, we will have a clean set of data and load scripts that can be repeatedly used for data 
conversion (e.g. Dry-Run conversions, followed by Cut-Live conversion). The load scripts can be altered directly for 
additional business or non-business requirements, as needed. 

Our success stems from our referral-dominated client base. The continuous attention to detail, friendly nature, 
knowledge and expertise are the results of our long lasting customer relationships and have driven CSI's success. We 
are passionate about what we do and certainly understand the need for urgency. CS1 is always willing and ready to 
help support our customers' requests, projects, or issues that may occur. 


We offer the most comprehensive structured data conversion services on the market today. We do not "just make the 
data fit" into the InfoShare™ system. We work with the agency to cleanse the data, standardize it and normalize it for 
future reference. Most vendors do not perform this service properly because it is extremely complex and labor 
intensive. CSI Technology Group employs skilled engineers who specialize in data conversion so that we can do it the 
right way. 
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Implementation Plan: 


CSI Deployment Process 



Testing 

Based upon the customer’s requirements, CSI’s project team will work with RPD project team to define test 
plans for the proposed system. For each interface, module & sub-module, CSI will provide quick start guides 
that contain the appropriate work scenarios for the proposed system. The system will have passed all CSI’s 
test cases before being presented to RPD testers for validation. CSI will install the proposed software in the 
RPD’s test environment. The RPD testers will use work scenarios to validate the system as part of their 
acceptance testing. CSI expects the RPD core team to test the system rigorously as each set of modifications 
are made during this acceptance phase, and at each phase of the project. CSI will provide support during User 
Acceptance Testing and make corrections as needed. 





Review schema with clients & interface partners to confirm desired results _ 1 day _ 11/19/2018 8:00 11/19/20X8 17:00 

CSI to code agreed upon final schema _ 10 days 11/20/2018 8:00 12/3/2018 17:00 






































































































































































































































































































































LexisNexis to provide schema to CS _ 1 day 

Review schema with cl ents & interface partners to confirm desired results _ 1 day 

CS to code interfaces to work with InfoShare __40 days 























































































































































133 _ Event Setup _ 2 days 

134 _ Document Management Structure _ 2 days 

135 System Administration functions_ |l day 



102 _ Review returned questionnaire with CSI Engineers _'_ 1 day _ 1/3/2019 8:00 1/3/201917:00 101 

103 Prototype Configuration - CSI Engineers code in initial information _ 2 days _ 1/4/2019 8:00 1/7/2019 17:00 102 

104 Groups/Staff ___2 days_1/4/2019 8:00 1/7/2019 17:00 102 






























































































































































































167 C$1 & Richmond SQL Build _ 3 days _ 2/8/2019 8:00 2/12/2019 17:00 166 

168 Richmond Firewall and Switch configuration _ 3 days _ 2/13/2019 8:00 2/15/201917:00 167 

169 Installation of RMS Software on Richmond Cloud platform 2 days _ 2/18/2019 8:00 2/19/201917:00 168 



136 CSI to provide initiation script for browser settings, PDF viewer, etc to ensure smooth operation 1 day _ 12/19/2018 8:00 12/19/201817:00 127 

137 CSI Account Managers schedule on site Gap Analysis Review with End Users _ 5 days _ 12/20/20188:00 12/26/2018 17:00 136 

138 Meet with Command Staff & Provide High Level Overview_1 day_12/20/2018 8:00 12/20/2018 17:00_ 


















































































































































































































201 Ensure that any required documents have bee n uploaded RMS _ 1 day _ 2/26/2019 8:00 2/26/2019 17:00 175,176 

202 Go Live Phase _ 1 day? 2/27/2019 8:00 2/27/2019 17:00 _ 

203 Go Live Richmond RPD 1 day? 2/27/2019 8:0p| 2/27/201917:Qo| 198~~ 



170 Testing (Testing Plan Pending) _ •* ^ays _ 2/20/2019 8:00 2/26/2019 17:00 169 

171 Training Plan __ 4 days _ 2/20/2019 8:00 2/25/2019 17:00 _ 

172 Administrative User Tra mng _4 days_2/20/2019 8:00 2/25/2019 17:00_ 
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Case numbers issued each day _ 

UCR and IBRS state reporting _ 

Forms from attachment III 

Case report for submjssionjo Commonwealth Attorney (electronic and 




















































































Contents category grouped under general overview heari ngs, 
njndexjgftego^c^tajnjnr ^ online HetP index. 

Find category that alows the user to search for particular words and phrases in Help topics instead of searching for information by 
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pie system shall provide a Synopsis feature to display an article's history throughout the RMS with the option to dril down into individual records. 
The system shall integrate the Master Property index with the RMS Property and Evidence module. Pawn module. Arrest Property, Incident 















































The system shaH subject all location information being processed in RMS to stringent formatting rules. In addition, If the address is within the 
boundaries of the agency geofile, the system shal validate the actual location. During the geovaidation process, the system shall add key 
identification information, such as XA 7 Z coordinates and agency- defined reporting areas, to the location information. 
















The system shall assign each case a classification of either ’REPORTABLE' or equivalent to indicate that the case is to be included in 
subsequent state- and/or federally mandated crime statistics reports or 'NON-REPORTABLE" or equivalent for cases exchided from crime 
statistic fefosffriq. 

The system shal allow the user to place an alert on a case and the user will see a visual indicator that an alert exists for a given case. 



The RMS includes a distinct module that enables each agency/unsdiction to organize and access al data associated with a case, including: 
a; Assemble aH official information associated with an in cident 

h Consolidate all related follow-up and investigation reports and records _ , ___ 



































































































































































































































































































































[vendor's baseline Juvenie Detention form. 






























































a|As$ociated Offense Record(s; 



Vendor's baseline Organization form. 











































































Associated Evidence Record 



^Associated Organization Recordrs; 








































































































